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Abstract. We use class field theory, specifically Drinfeld modules of rank 1, to 
construct a family of asymptotically good algebraic-geometric (AG) codes over 
fixed alphabets. Over a field of size £ , these codes are within 2/(v^ - 1) of 
the Singleton bound. The functions fields underlying these codes are subficlds 
with a cyclic Galois group of the narrow ray class field of certain function fields. 
The resulting codes are "folded" using a generator of the Galois group. This 
generalizes earlier work by the first author on folded AG codes based on cyclotomic 
function fields. Using the Chebotarev density theorem, we argue the abundance 
of inert places of large degree in our cyclic extension, and use this to devise a 
linear-algebraic algorithm to list decode these folded codes up to an error fraction 
approaching 1 — i? where R is the rate. The list decoding can be performed in 
polynomial time given polynomial amount of pre-processed information about the 
function field. 

Our construction yields algebraic codes over constant-sized alphabets that can 
be list decoded up to the Singleton bound — specifically, for any desired rate 
R G (0,1) and constant e > 0, we get codes over an alphabet size (1/e)'^'-^/'^ ^ 
that can be list decoded up to error fraction 1 — R~e confining close-by messages to 
a subspace with iV"^^^/^ ^ elements. Previous results for list decoding up to error- 
fraction I — R—e over constant-sized alphabets were either based on concatenation 
or involved taking a carefully sampled subcode of algebraic-geometric codes. In 
contrast, our result shows that these folded algebraic-geometric codes themselves 
have the claimed list decoding property. 



1. Introduction 

Reed-Solomon codes are a classical and widely used family of error- correcting 
codes. They encode messages, which are viewed as polynomials / G of degree 

< k over a finite field ¥g, into codewords consisting of the evaluations of / at a 
sequence of n distinct elements ai, . . . G Fg (this requires a field size q ^ n). 
We refer to n as the block lengh of the code. The rate of this code, equal to the 
ratio of number of message symbols to the number of codeword symbols, equals 
R = k/n. Since two distinct polynomials of degree < k can agree on at most k — 1 
distinct points, every pair of Reed-Solomon codewords differ on more than n — k 
positions. In other words, the relative distance of this code, or the minimum fraction 
of positions two distinct codewords differ on, is bigger than (l — R). This means that 
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even if up to a fraction (1 — R)/2 of the n codeword symbols, are corrupted in an 
arbitrary manner, the message polynomial / is still uniquely determined. Moreover, 
classical algorithms, starting with [14], can recover the message / in such a situation 
in polynomial time. 

For a fraction of errors exceeding (1 — R)/2, unambiguous decoding of the correct 
message is not always possible. This holds not just for the Reed-Solomon code but 
for every code. However, if we allow the decoder to output in the worst-case a 
small list of messages whose encodings are close to the corrupted codeword, then it 
turns out that one can correct a much larger error fraction. This model is called 
list decoding. Using the probabilistic method, for any e > 0, one can prove the 
abundance of codes of rate R which can be list decoded up to an error fraction 
(1 — R — e) with a maximum output list size bounded by a constant depending 
only on e. This error fraction is twice the classicial (1 — -R)/2 bound, and further 
is optimal as the message has Rn symbols of information and recovering it up to 
some small ambiguity is impossible from fewer than a fraction R of correct codeword 
symbols. 

Recent progress in algebraic coding theory has led to the construction of ex- 
plicit codes which can be efficiently list decoded up to an error fraction approach- 
ing the 1 — R information-theoretic limit. The first such construction, due to 
Guruswami and Rudra [7], was folded Reed-Solomon codes. In the m-folded ver- 
sion of this code (where m is a positive integer), the Reed-Solomon (RS) encoding 
(/(I), /(7), ■ ■ ■ , /(7"~"^)) of a low-degree polynomial / G Fg[X] is viewed as a code- 
word of length N = n/m over the alphabet by blocking together successive sets 
of m symbols. Here 7 is a primitive element of the field ¥q. The alphabet size of 
the folded RS codes is g"* > N"^. To list decode these codes up to an error fraction 
1 — R — e, one has to choose m ^ \je^ which makes the alphabet size a larger 
polynomial in the block length. In comparison, the probabilistic method shows the 
existence of such list decodable codes over an alphabet size exp(0(l/e)), which is 
also the best possible asymptotic dependence on e. 

It is possible to bring down the alphabet size of folded RS codes by concatenating 
them with appropriate optimal codes found by a brute-force search, followed by 
symbol redistribution using an expander [7]. However, the resulting codes have a 
large construction and decoding complexity due to the brute-force decoding of the 
inner codes used in concatenation. Furthermore, these codes lose the nice algebraic 
nature of folded RS codes which endows them with other useful features like list 
recovery and soft decoding. It is therefore of interest to find explicitly described 
algebraic codes over smaller alphabets with list decoding properties similar to folded 
RS codes. 

Algebraic-geometric (AG) codes are a generalization of Reed-Solomon codes based 
on algebraic curves which have n ^ q F^-rational points. These enable construction 
of RS-like codes with alphabet size smaller than (and possibly even dependent of) 
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the block length. Thus, they provide a possible avenue to construct the analog of 
folded RS codes over smaller alphabets. 

The algebraic crux in list decoding folded RS codes was the identity /(7X) = 
f{XY (mod E{X)) for E{X) = 7 which is an irreducible polynomial over Fg. 

Extending this to other algebraic-geometric codes requires finding a similar identity 
in the function field setting. As noted by the first author [6], this can be achieved 
using Frobenius automorphisms a in cyclic Galois extensions, and considering the 
residue of /"^ at a place of high degree in the function field. Using certain subfields 
of cyclotomic function fields, Guruswami [6] was able to extend the folded RS list 
decoding result of [7] and obtain folded algebraic-geometric codes of rate R list 
decodable up to error fraction 1 — R — e over an alphabet size (logiV)^(i/"'). In 
other words, the alphabet size was reduced to poly-logarithmic in the block length 

of the code. 

1.1. Our result. The main result in this work is a construction of folded algebraic- 
geometric codes which brings down the alphabet size to a constant depending only 
on e. This is based on algebraic function fields constructed via class field theory, 
utilizing Drinfeld modules of rank 1. 

Theorem 1.1 (Main). Let i be a square prime power and let q = i'^. For every 
R G (0, 1), there is an infinite family of ¥q-linear algebraic- geometric codes of rate 
at least R which has relative distance at least 1 — R — 2/{^/i — 1). 

For every pair of integers m ^ s ^ 1, the m-folded version of these codes (which 
is a code over alphabet F™ ) can be list decoded from an error fraction 

s f m f 2 \\ 

outputting a subspace over Fg with at most 0{N^^~^'^'^) elements that includes all 
message functions whose encoding is within Hamming distance tN from the input. 
(Here N denotes the block length of the code.) 

Given a polynomial amount of pre-processed information about the code, the al- 
gorithm essentially consists of solving two linear systems over ¥g, and thus runs in 
deterministic polynomial time. 

Picking suitable parameters in the above theorem, specifically ^ ~ 1/e^, s ~ 1/e, 
and m !^ leads to folded AG codes with alphabet size (l/e)'^'-^/^ ^ of any desired 
rate R G (0, 1) that are list decodable up to error fraction 1 — R — e with a maximum 
output list size bounded by N^^^^'^^\ In other words, the polylogarithmic alphabet 
size of cyclotomic function fields is further improved to a constant depending only 
on e. 

We prove the above theorem by employing the recently developed linear- algebraic 
approach to list decoding, which was first used to an alternate, simpler proof of the 
list decodability of folded RS codes up to error fractions approaching 1 — R (see [8]). 
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One of the simple but key observations that led to this work is the following. 
In order to apply the linear algebraic list decoder for a folded version of AG codes 
(such as the cyclotomic function field based codes of [6]), one can use the Frobenius 
automorphism based argument to just combinatorially bound the list size, but such 
an automorphism is not needed in the actual decoding algorithm. In particular, 
we don't need to find high degree places with a specific Galois group element as its 
Frobenius automorphism (this was one of the several challenges in the cyclotomic 
function field based construction [6]), but only need the existence of such places. 
This allows us to devise a linear-algebraic list decoder for folded versions of a family 
of AG codes, once we are able to construct function fields with certain stipulated 
properties (such as many rational places compared to the genus, and the existence 
of an automorphism which powers the residue of functions modulo some places). 
We then construct function fields with these properties over a fixed alphabet using 
class field theory, which is our main technical contribution. 

This gives the first construction of folded AG codes over constant-sized alphabets 
list decodable up to the optimal 1 — R bound, although we are not able to efficiently 
construct the (natural) representation of the code that is utilized by our polynomial 
time decoding algorithm. This representation consists of the evaluations of regular 
functions at the rational places used for encoding (by a regular function at a place, 
we mean a function having no pole at this place). 

In our previous works [9, 10], we considered list decoding of folded AG codes and 
a variant where rational points over a subfield are used for encoding. We were able 
to show that a subcode of these codes can be efficiently list decoded up to the optimal 
1 — R — e error fraction. The subcode is picked based on variants of subspace-evasive 
sets (subsets of the message space that have small intersection with low-dimensional 
subspaces) that are not explicitly constructed. In contrast, in this work we are 
able to list decode the folded AG codes themselves, and no randomly constructed 
subcode is needed. 

1.2. Techniques. Our main techniques can be summarized as follows. 

Our principal algebraic construction is that of an infinite family of function fields 
over a fixed base field with many rational places compared to their genus, together 
with certain additional properties needed for decoding. Our starting point is a 
family of function fields E/¥i (where £ = ^/q) such as those from the Garcia- 
Stichtenoth towers [4, 5] which attain the Drinfeld-Vladut bound (the best possible 
trade-off between number of rational places and genus). We consider the constant 
field extension L = ¥q - E, and take its narrow ray class field of with respect to some 
high degree place. We descend to a carefully constructed subfield F of this class 
field in which the F^-rational places in L split completely, and further the extension 
F/L has a cyclic Galois group. 

A generator a of this cyclic group Gal(-F/L), which is an automorphism of F 
of high order, is used to order the evaluation points in the AG code and then to 
fold this code. This last part is similar to the earlier cyclotomic construction, but 
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there the full extension F/¥q{X) was cyclic. This was a stringent constraint that 
in particular ruled out asymptotically good function fields — in fact even abelian 
extensions must have the ratio of the number of rational places to genus tend to 
when the genus grows [2]. In our construction, only the portion F/L needs to be 
cyclic, and this is another insight that we exploit. 

Next, using the Chebotarev density theorem, we argue the existence of many large 
degree places which are inert in the extension F/L and have a as their Frobenius 
automorphism. This suffices to argue that the list size is small using previous 
algebraic techniques. Essentially the values of the candidate message functions at 
the inert places mentioned above can be found by finding the roots of a univariate 
polynomial over the residue field, and these values can be combined via Chinese 
remaindering to identify the message function. 

Under the linear-algebraic approach, the above list will in fact be a subspace. 
Thus knowing that this subspace has only polynomially many elements is enough to 
list all elements in the subspace in polynomial time by solving a linear system! To 
solve the linear system, we make use of the local power series expansion of a basis 
of the Riemann-Roch message space at certain rational places of F (namely those 
lying above a rational place of L that splits completely in F/L). 

To summarize, some of the novel aspects of this work are: 

(1) The use of class fields based on rank one Drinfeld modules to construct 
function fields F/¥q with many F^-rational places compared to its genus, 
and which have a subfield L such that F/L is a. cyclic Galois extension of 
sufficiently high degree. 

(2) The use of the Chebotarev density theorem to combinatorially bound the 
list size. 

(3) Decoupling the proof of the combinatorial bound on list size from the algo- 
rithmic task of computing the list. This computational part is tackled by 
a linear-algebraic decoding algorithm whose efficiency automatically follows 
from the list size bound. 

1.3. Organization. In Section 2, we show a construction of folded algebraic-geometric 
codes over arbitrary function fields with many rational places and an automorphism 
of relatively large order. Then we present a linear-algebraic list decoding of the 
folded codes. Under some assumption about the base function fields, we prove in 
the same section that the folded codes is deterministically list decodable up to the 
Singleton bound. Section 3 is devoted to the construction of the base function fields 
needed in Section 2 for constructing our folded codes. Our construction of the base 
function fields is through class field theory, specifically Drinfeld modules of rank 1. 
In Section 4, we discuss the encoding and decoding of our folded codes by some 
possible approach of finding explicit equations of the base function fields that are 
constructed in Section 3. The main result of this paper is then stated after discussion 
of encoding and decoding. 
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2. Linear-Algebraic List Decoding of Folded Algebraic-Geometric 

Codes 

In this section, we first present a construction of folded algebraic geometric codes 
over arbitrary function fields with certain properties and then give a deterministic 
list decoding of folded algebraic geometric codes over certain function fields satisfy- 
ing some conditions. 

2.1. Preliminaries on Function Fields. For convenience of the reader, we start 
with some background on global function fields over finite fields. 

For a prime power g, let Fg be the finite field of q elements. An algebraic 
function field over in one variable is a field extension F D Fg such that F is a 
finite algebraic extension of Fg(a:) for some x & F that is transcendental over ¥q. 
The field ¥g is called the full constant field of F if the algebraic closure of F^ in F 
is ¥q itself. Such a function field is also called a global function field. From now on, 
we always denote by F/¥q a function field F with the full constant field ¥g. 

Let ¥p denote the set of places of F. The divisor group, denoted by Div(F), is 
the free abelian group generated by all places in ¥p. An element G = J2p&p "^pP 
of Div(F) is called a divisor of F, where rip = for almost all P G P_f. The support, 
denoted by Supp(G), of G is the set {P G Pf : np ^ 0}. For a nonzero function 
z E F, the principal divisor of z is defined to be div{z) = ^pgp^ i'p{z)P, where 
Up denotes the normalized discrete valuation at P. The zero and pole divisors of 
z are defined to be div(2;)o = T.up{z)>o^pi^)P ^nd div(z)oo = -T.upiz)<o^pi^)P^ 
respectively. 

For a divisor G of F, we define the Riemann-Roch space associated with G by 

CiG) := {/ G F* : div(/) + G ^ 0} U {0}. 

Then C{G) is a finite dimensional space over F^ and its dimension i{G) is determined 
by the Riemann-Roch theorem which gives 

i{G) = deg{G) + l-g + iiW -G), 

where g is the genus of F and is a canonical divisor of degree 2g — 2. Therefore, 
we always have that i{G) ^ deg(G) + l — g and the equality holds if deg(G) ^ 2(7 — 1. 

For a function / and a place P G Pp with up{f) ^ 0, we denote by /(F) the 
residue class of / in the residue class field Fp at P. For an automorphism G 
Aut(F/Fg) and a place F, we denote by F"^ the place {0(x) : x G F}. For a 
function / G F, we denote by the action of </> on /. If up{f) ^ and Up4,{f) ^ 0, 
then one has that up^f^ ) ^ and f{P'^) = (F). Furthermore, for a divisor 
G = J^PeVp "^-P-^ denote by G'^ the divisor J^PeFp ''^p^'^- 

2.2. Folded Algebraic Geometric Codes. To construct our folded codes, we 
assume that there exists a global function field F with the full constant field ¥q 
having the following property: 
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-'"-1 p per pcr'^-l 
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Property (PI) 

(i) There exists an automorphism a in Aut(F/Fg); 

(ii) F has mN distinct rational places Pi, , . . . , Pf " , -r2, -rg , 

p per JDa-"^~^ . 

J^N, J^N^ • • • 5 Af 1 

(iii) F has a divisor D of degree e such that D is fixed under ex, i.e., D'^ 
and p;'"' ^ Supp(P') for all 1 ^ i ^ iV and ^ j ^ m - 1. 

A folded algebraic geometric code can be defined as follows. 

Definition 1 (Folded AG codes). The folded code from F with parameters A^, /, q, e, m, 

denoted by F{N,l,q,e,m), encodes a message function / G C{ID) as 

\ 
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/(A) 




/(^2) 




/(^iv) 


(1) tt: 




















, . . . , 
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e (F-) 



N 



Note that the folded code F(A^, /, g, e, m) has the alphabet and it is F^-linear. 
Furthermore, F(A^, /, g, e, m) has the following parameters. 

Lemma 2.1. If le < mN , then the above code F{N,l,q,e,m) is an Wg-linear code 
with alphabet size g™, rate at least ^-^j^^, and minimum distance at least N — ^. 

Proof. It is clear that the map vr in (1) is F^-hnear and the kernel of vr is 

TV m-1 
i=l j=0 

which is {0} under the condition that le < mN. Thus, vr is injective. Hence, the rate 
is at least by the Riemann-Roch theorem. To see the minimum distance, let / 

be a nonzero function in C{ID) and assume that / is the support of 7r(/). Then the 

Hamming weight wti^(7r(/)) of 7r(/) is |/| and / G £ {iD — Yli^ ^7=^ Pf^- Thus, 



^ deg {id - Zi^, ZT=o Pf) = - m{N - |/|), i.e., wt^(7r(/)) = \I\>N- 
This completes the proof. 



le 
m ' 

□ 



2.3. List Decoding of Folded Algebraic Geometric Codes. Suppose a code- 
word (1) encoded from / G C{ID) was transmitted and received as 

/ yi,i 1/2,1 Vn,! \ 

yi,2 1/2,2 : 



(2) 



\yi,m ■■■ yN,r 

where some columns are erroneous. Let s ^ 1 be an integer parameter associated 
with the decoder. 
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Lemma 2.2. Given a received word as in (2), we can find a nonzero linear polyno- 
mial m -F[Yi, • • • , Ys] of the form 

(3) Q(Fi, F2, . . . , Ys) = A, + A^Y^ + ^2^2 + ■ ■ ■ + 
satisfying 

(4) g(yi,,+i, y.,,+2, ■ ■ ■ , = A^{Pf) + + ■ ■ ■ + A,{Pf)y,^,^, = 

/or i = 1,2,...,N and j = 0,1, . . . ,m — s. The coefficients Ai of Q satisfy 
Ai G C{k,D) for i = 1,2, ... ,s and Aq G + l)D) for a "degree" parameter d 
chosen as 

N{m -s + l)-d + {s + l){g - 1) + 1 



(5) 



e(s + l) 



Proof. Let u and v be dimensions of C{k,D) and C{{k, + 0-^)) respectively. Let 
{xi, . . . ,Xu} be an Fg-basis of C{kD) and extend it to an F^-basis {xi, . . . ,Xy} of 
C{{d + l)D). Then Ai is an Fg-linear combination of {xi, . . . , x„} for i = 1, 2, . . . , s 
and Aq is an F^-linear combination of {xi, . . . , x^}. Determining the functions Ai is 
equivalent to determining the coefficients in the combinations of Ai. Thus, there are 
totally su + v freedoms to determine Aq, Ai, . . . , As. By the Riemann-Roch theorem, 
the number of freedoms is at least s{ne — g + 1) + + l)e — g + 1. 

On the other hand, there are totally N{m — s + 1) equations in (4). Thus, there 
must be one nonzero solution by the condition (5), i.e., Q{Yi, Y2, . . . , Yg) is a nonzero 
polynomial. □ 

Lemma 2.3. /// is a function in C{ID) whose encoding (1) agrees with the received 
word y in at least t columns with 

(k + l)e 
m — s + 1 

then Q{f, f"' ^ , . . . , f is the zero function, i.e., 

(6) Ao + Ai/ + Asr" + ■ ■ ■ + Ar"'°"" = 0. 

Proof. Since D = D" , we have f"' G C{ID) for all i G Z. Thus, it is clear that 
g(/,/^"',...,r"''''^) is a function in C{{k + 1)D). 

Let us assume that / C {1,2,..., A^} is the index set such that the ith columns 
of y and vr(/) agree if and only if z G /. Then we have |/| ^ t. For every z G / and 
^ J ^ m — s, we have by (4) 



= Ao{P[') + A^{P,^')y,,+^ + A,{P[')y,,+, + ... + As{P[')u, 



AoiPf) + A^{P,-')f{Pt) + A,{Pt)f{Pt^')) + ■■■ + As{Pf)f{Pf^'-') 
AoiPf) + A^iPf)fiPt) + A2{Pt)f'''\P-') + ■■■ + As{Pf)f^"^\Pt 
(Ao + AJ + A^f"-' + ■■■ + AJ^-'^'^ {Pf), 
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i.e., Pf^ is a zero of Q{f, /'^, . . . , f^" ^). Hence, Q{f, ^ , . . . , f is a function 
in C {^K + l)D — Xlie/ Y1^=q Pt^- desired result follows from the fact that 

deg ((k + i)D - E,,, Er=7 ^'^O < °- ° 

By Lemma 2.3, we know that all candidate functions / in our list must satisfy 
the equation (6). In other words, we have to study the solution set of the equation 
(6). In our previous work [9], to upper bound the list size, we analyzed the solutions 
of the equation (6) by considering local expansions at a certain point. This local 
expansion method only guarantees a structured list of exponential size. Through 
precoding by using the structure in the list, we were able to obtain a Monte Carlo 
construction of subcodes of these codes with polynomial time list decoding. The 
other method used in [7] for decoding the Reed-Solomon codes is to construct an 
irreducible polynomial h{x) of degree q — 1 such that every polynomial / satisfies 
yo- ^ jq j-QQ^ Then the solution set of (6) is the same as the solution set of the 

equation Aq + Aif + A2f'^ ^ V Asf"'^ = mod h since deg(/) < q-l = deg(/i). 

Thus, there are at most solutions for the equation (6). In order to generalize 
the latter idea used for the Reed-Solomon code to upper bound our list size of our 
folded algebraic geometric codes, we require some further property that F must 
satisfy. 

Property (P2) 

(i) There exists a finite set T of places of F such that supp(i^) fl T = and 
every place in T has the same degree; 

(ii) There exists an integer n > such that /"^ = Z"^" mod R, i.e., [R) = 

for every i? G T and all / G F with UR^f) ^ 0. 

(iii) Ei?6Tdeg(P) > le. 

Lemma 2.4. Assume that F satisfies (PI) and (P2), then the solution set of the 
equation (6) has size at most 

Proof. Consider the map ip : C{ID) — )■ HijeT-^R t)y sending z to ip{z) = {z{R))r^t- 
It is clear that is F^-linear. Furthermore, is injective. Indeed, if '4){y) = ip{z) 
for some y,z E C{ID), then tp{y — z) = 0, i.e., {y — z){R) = for all R E T. 
Hence, y — z belongs to C{ID — ^^gT^-R)- So, we must have y — z = since 
deg{lD - EfieT R) = ie- E^^t deg(i?) < 0. 

Let W be the solution set of (6). Then for every R E T and / E W, we have 

= Ao{R) + A,{R)f{R) + A2{R)f''~\R) + --- + A,{R)f''~''-"\R) 
= Ao{R) + A,iR)f{R) + A2{R)f'\R) + ■■■ + A,(P)/«"'^"''(i?) E Fr. 

The above equation has at most solutions in Fr. This implies that the set 

Wr := {f{R) ■ f E W} C Fr has size at most g"^'*"^). Moreover, it is clear that 
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ip{W) C HijeT ^R- Thus, our desired result follows from 



\W\ = \ip{W)\ ^ 



)\T\ 



This completes the proof. □ 

Remark 1. (i) From the proof of Lemma 2.4, we can see that the places in the 
set T given in (P2)(i) need not all be of the same degree. In fact, as long 
as the condition in (P2)(iii), i.e., X]i?6T "^^sl-R) > is satisfied, we can 
guarantee the list size given in Lemma 2.4. 
(ii) In [6], the set T given in (P2)(i) has a single place with degree bigger than 
le. Then the list size would be g"^*"^)!'^! = q'^(^~^). It seems that we could 
get a smaller list size. However, it is not possible in our case. The reason is 
that if we choose |T| = 1, then the degree of the place R is bigger than le 
and thus the extension degree of F/L is at least le/u, where L is the subfield 
of F fixed by (cr). On the other hand, we will see that the extension degree 
of F/L is e = |(cr)| from (P3) below. This means that we must have u> I. 
This restriction on u makes our list size even bigger when we choose a set T 
of single place. 

Now we look at the fraction of errors that we can correct from the above list 
decoding. By taking t = 1 + ^^^J^i and combining Lemmas 2.3 and 2.2, we 

conclude the fraction of errors t = 1 — t/N satisfies 

s s m k + q 

(7) r « X X — -f , 

s + 1 s + 1 m — s + 1 mN 

where k is the dimension of C{ID) which is at least le — g + 1. 

Let £ be an even power of a prime and q = i"^. In Section 3, we will show that, 
for any given family {E/¥i} with N(E /¥i)/g{E) — >■ y/i — 1 and g{E) — > oo, where 
N{E/¥e) denotes the number of F^-rational places of E, there exists a family {F/¥q} 
of function fields satisfying the following 

Property (P3) 

(i) F/L is a cyclic Galois extension of degree e, where L is the constant field 
extension E ■ and e = (r + !)/(£ + 1) with r = 2\N{E/¥e)/ {VI - I)] + 1; 

(ii) There exists a subset S of Fp such that l^l ^ g*" and deg(i?) = 3re for 
all -R e S*. Moreover, for any R E S and z E F with i'r{z) ^ 0, one has 
z" ^ = z^'^'^ mod -R, where a is the generator of the Galois group Gal(F/L) 
(note that Gal(F/L) is a subgroup of Aut(F/Fg)). 

(iii) Every rational place of E can be regarded as a rational place of L and it 
splits completely in F. Thus, one has N{F/¥q) ^ eN{E/¥i), where N{F/¥q 
denotes the number of Fg-rational places of F. Furthermore, 

\imm.iN{F/¥q)/g{F) ^ (v^- l)/2 = {q^'^ - l)/2 . 
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Theorem 2.5. Let i be a square prime power and let q = . For every R G (0, 1), 
there is an infinite family of folded codes given in (1) of rate at least R which has 
relative distance at least 1 — R — 2/(^/1 — 1). 

For every pair of integers m s ^ 1, these codes can be list decoded from an 
error fraction 

r = ^(l 2 N\ 

outputting a subspace over Fg with at most 0{N^^^^^'^) elements that includes all 
message functions whose encoding is within Hamming distance tN from the input. 
(Here N denotes the block length of the code.) 

Proof. Let {F/¥g} be a family of function fields satisfying (P3) constructed in The- 
orem 3.8. Choose a rational place oo of -E and regard it as a rational place of L. 

Define the divisor D := / Xlp^oloo PooSPf '^^^^ ^^^y ^^^^ -^'^ ~ 

For every rational place P of E, there are exactly e rational places of F lying over 

e— 1 

P and they can be represented as P, P'^, . . . , P^ . By taking away those ratio- 
nal places lying over oo, we have at least e(n — 1) rational places of F, where 
n = N{E/¥ii). Thus, for an integer m with 1 ^ m < e, we can label Nm distinct 
places Pi, Pf , . . . , Pf" , . . . , Pat, P^, . . . , P^ of F such that none of them lies 
over oo, as long as iV ^ (n - 1) [^J = {N{E/¥,) - 1) [^J . 

It is clear that the property (PI) is satisfied and hence we can define the folded 
algebraic geometric code F{N,l,q,e,m) as in Definition 1. We choose / to satisfy 
the condition le < Nm. Choose a subset T of 5* with |T| = — 1] . Then we have 

V deg(P) ^ 3re{VI - 1) ^ 6N{E/¥i)e = 6mN{E/¥i)— > Nm > le. 

This implies that the property (P2) is also satisfied. Hence, the code F(A^, I, q, e, m) is 
deterministically list decodable with list size at most g3r(s-i)rv^-i] _ Q^qsny Note 
that the code length is which is approximately en = m = 
Thus, the list size is OiN^^^'^^'). 

The claimed error fraction follows from (7) and the fact that g/Nm — )■ 1)/2. 

□ 

3. Construction of a Family of Function Fields 

In view of Theorem 2.5, it is essential to construct a family of function fields 
satisfying the Property (P3). In this section, we use class field theory and the 
Chebotarev Density Theorem to show the existence of such a family. 

3.1. Narrow-ray class fields and Drinfeld module of rank one. Throughout 
this subsection, we fix a function field F over and a rational place oo. Denote by 
A the ring 

A:={xeF : vp{x) ^ for all P ^ oo}. 
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Let Fr and Prin denote the fractional ideal group and the principal ideal group of A, 
respectively. Then the fractional idea class group 01(^4) = Fr/Prin of A is actually 
isomorphic to the zero degree divisor class group of F. 

Let D = '^p'^p{D)P be a positive divisor of F with oo ^ supp(D). For x G F*, 
X = 1 (mod D) means that x satisfies the following condition: 

if P e supp(L'), then iyp{x - 1) ^ i^piD). 

Let Ft£) be the subgroup of Fr consisting of the fractional ideals of A that are 
relatively prime to D, that is, 

Ftd = {^EFi: z/p(3ft) = for all P G supp(D)}. 

Define the subgroup Pimo of Ftd by 

Prin^) = {xA : x G -F*, x = 1 (mod D)}. 

The factor group Fr/j/Prin^ is called the oo-ray class group modulo D. It is a finite 
group and denoted by Cl£)(A). If D = 0, then we obtain the fractional ideal class 
group 01(^4). 

Choose a local parameter t G -F at P, i.e., ^'p(t) = 1. Then the oo-adic completion 
of F consists of all power series of the form Ylilv where w G Z and G Fg 
for all V. We can define a sign function sgn from to F* by sending YlTLv ^i^^ 
to a„ if a„ 7^ (see [13, pages 50-51]). Define 

Prin J = {xA : x G P*, sgn(x) = 1, x = 1 (mod D)}. 

Definition 2 (Narrow ray class group). The factor group 

C1+(A) = Frz,/Prin+ 

is called the narrow ray class group of A modulo D {with respect to the sgn). When 
D is supported on a single place Q, i.e., D = 1-Q, we denote C\d{A) (resp. CV^{A)) 
as simply C\q{A) {resp. CIq{A)). 

We have the following result [13, Proposition 2.6.4] concerning narrow ray and 
ideal class groups. 

Lemma 3.1. (i) Prin J is a subgroup o/Prin(P) and Prin/j/PrinJ ~ F*. 

(ii) We have the isomorphisms 

Cl+(yl)/F; ^ Cl+(A)/(Prinz5/Prin+) ^ C\d{A). 

(iii) We have 

C\UA)/{A/Vr ^ C\{A), 
where V is the ideal of A corresponding to the divisor D, i.e., = Y\ if 
D = 'Y^upP with ip being the prime ideal of A corresponding to the place P. 

Let Ha denote the Hilbert class field of P with respect to the place oo, i.e, Hj^ is 
the maximal abelian extension in a fixed algebraic closure of P such that oo splits 
completely. Then we have Gal{HA/F) ^ C\{A). 

We will use the following result from class field theory (see [13, Sections 2.5-2.6]). 
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Proposition 3.2. Now let Q he a place of degree d > 1 in a function field F/¥g. 
Then there exists an abelian extension of F (called a narrow ray class field) with 
the following properties: 

(i) Ga\{FQ/F) ^ Cl^(A) and the extension degree ofF^/F is \C\^{A)\ = {q<^ - 
l)|Cl(y4)| = {q'^ — l)hF, where hp '■= |Cl(y4)| is the zero degree divisor class 
number of F. 

(ii) The Hilbert class field Ha of F is a subfield of F^ and the Galois group 
Gal(F'5/iJ^) is isomorphic to {A/ Q)* ^ F*^, where Q is the ideal of A 
corresponding to the place Q. 

(iii) oo and Q are only ramified places in F^/F. The inertia group of Q in 
F^/F is {A/Q)* and the inertia group of oo is F*. In particular, the rami- 
fication index of Q is cq = q'^ — 1 and the ramification index of oo is q — 1. 
Furthermore, oo splits into rational places in F'^ . 

(iv) In the Galois extension F^ / F , the Frobenius automorphism of a place P 
that is different from oo and Q is P itself when P is viewed as an element 
m C1+(A). 

From the above, we can easily compute the genus of F^ by the Hurwitz genus 
formula, i.e., 

2(7(F«) - 2 = {2g{F) - 2)/i^(g'^ - 1) + (g - 2)/i^^^ + - 2)/i^ . 

q-l 

Next, we give a more explicit description of the narrow ray class field F'^ in terms 
of a Drinfeld module of rank one. 

Let p be the characteristic of F^ and let tt : c H- be the Frobenius endomor- 
phism of Ha- Consider the left twisted polynomial ring -ffyi[7r] whose elements are 
polynomials in vr with coefficients from Ha written on the left; but multiplication 
in -^^[71"] is twisted by the rule 

vrn = u^TT for all u G Ha- 

Let D : -ffyi[7r] — t- Ha be the map which assigns to each polynomial in i/A[7r] its 
constant term. 

Definition 3. A Drinfeld A-module of rank 1 over Ha is a ring homomorphism 
(p : A — )■ HaI'k]-, a i— j- 0a, such that: 

(i) not all elements of -^aItt] in the image of are constant polynomials; 

(ii) D o (j) is the identity on A; 

(iii) There exists a positive integer A such that deg(0a) = —Xu^o^a) for all nonzero 
a G A, where deg(0a) is the degree of (pa as a polynomial in vr. 

Example 3.3. Consider the rational function field F = Fg(T) with oo being the 
pole place of T. Then we have A = ¥q[T] and Ha = F = ¥g{T). A Drinfeld 
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A-module of rank 1 over F is uniquely determined by the image 0^ of T. By 
Definition 3 we must have 

D(0T) = po0)(r) = r, 

i.e., (pT is a nonconstant polynomial in vr with the constant term T. Since deg(0r) = 
—\iyoo{T) = A, we know that 0t is of the form T+/(7r)7r+x7r'^ for an element x G -F* 
and /(vr) G -F[7r] with deg(/(7r)) ^ A — 2. Taking x = 1 and /(vr) = gives the 
so-called Carlitz module, which yields the construction of cyclotomic function fields. 

Definition 4. We fix a sign function sgn. We say that a Drinfeld A-module of 
rank 1 over is sgn-normalized if sgn(a) is equal to the leading coefficient of (pa 
for all a E A. In particular, the leading coefficient of (pa must belong to F*. 

Definition 5 (Twisted polynomials corresponding to an ideal). Given a Drinfeld 
A-module (p of rank 1 over Ha and a prime ideal Q of A, let Iq^^ be the left ideal 
generated in HaItt] by the twisted polynomials (pa, a E Q. As left ideals are principal, 
Iq^^ = Ha[tt](Pq for a unique monic twisted polynomial (pQ G iJyi[7r]. 

Let K be any FT^-algebra. Then for a polynomial /(tt) = X]i=o^«^* ^ -^^[Tr] the 
action of /(vr) on K is defined by 

k 

/(7r)(t) = ^^P' foralHGi^. 

Let Ha denote a fixed algebraic closure of Ha whose additive group {Ha, +) is 
equipped with an A-module structure under the action of (p. 

Definition 6. Let be a sgn-normalized Drinfeld A-module of rank 1 over Ha and 
Q be a nonzero ideal of A. The Q-torsion module A^{Q) associated with (p is defined 
by 

A^{Q) = {te(lU,+)--(pQ{t) = 0}. 

The following are a few basic facts about A^{Q): 

(i) A^{Q) is a finite set of cardinality \A^{Q)\ = /°s(<^s). 

(n) A^{Q) is an A-submodule of {Ha,+) and a cyclic A-module isomorphic to 
A/Q; 

(iii) A^{Q) has := \{A/ Q)* \ generators as a cyclic A-module, where (A/ Q)* 

is the group of units of the ring A/Q. 

The elements of A^{Q) are also called the Q- torsion elements in {Ha,+)- The 
following gives an explicit description of narrow ray class fields in terms of extension 
fields obtained by adjoining these torsion elements. 

Proposition 3.4. The extension field HA{Afp{Q)) obtained by adjoining these Q- 
torsion elements to Ha is isomorphic to the narrow ray class field from Propo- 
sition 3.2, where Q is the place corresponding to the ideal Q. 
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In the case where F is the rational function field and is the Carlitz module in 
Example 3.3, the field F'^ is the cyclotomic function field over F with modulus Q. 

3.2. A family of function fields. In this subsection, we assume that £ is a prime 
power and q = i'^. The following is the key technical component of our construction 
of the function fields needed for our list-decodable code construction. 

Lemma 3.5. Let E/Fi be a function field with at least one rational point oo and 
a place Q of degree r, where r > 1 is an odd integer. Then there exists a function 
field F/Wg such that 



(i) F/ (Fg ■ E) is a cyclic abelian extension with [F : Fg ■ E] 



■qj ^ £+1 

(iii) g{F)^{g{E)-\Y^^\{^-\) 



(ii) iV(F/F,) ^ f^iV(i?/F, 



Proof. Let us outline the idea behind the proof. First we choose a place Q of -E of 
odd degree r and consider the constant extension Fg ■ E. Then Q remains a place 
of degree r in F^ ■ since r is odd (see [13, Theorem 1.5.2(iii)(a)]). We take the 
narrow ray class field oiFq - E modulo Q and then descend to a subfield K which 
is the fixed field of a certain subgroup of the Galois group. This is done to ensure 
that the rational places of E which can be regarded as rational places oiFq - E split 
completely in K/¥q ■ E (note that K may not be a cyclic extension over ¥q - E). To 
obtain a cyclic extension over F^ ■ E, we need to descend to a further subfield of 
which will be our claimed function field F. The reason why we use a place Q of odd 
degree is that, in the case of odd r, the narrow ray class group oi¥q- E modulo Q 
is a cyclic Galois extension over its Hilbert class field. In the end, we can construct 
our desired function field such that it is a cyclic extension over Fg ■ E. 

Put El := E and consider the constant field extension E2 := ¥q ■ Ei. Then 00 
remains a rational place in E2 and Q remains a place of degree r in E2 as well. 
Let Ai be the ring in Ei defined by 

Ai := {x e Ei-. up{x) ^ for all P 7^ 00} 

and let Hi be the Hilbert class field of Ai of Ei with respect to 00. Consider the 
narrow-ray class field Ef^ = Hi{K^{Q)) where Q is the ideal corresponding to place 
Q. Then we can identify Gal(Ef /E^) with ClJ(Ai). 

Now let K be the subfield of the extension E2 /E2 fixed by the subgroup G = 
¥*q ■ C\^{Ai) of Cl^(v42). We have 



|f; n a+(A 



and so 



■ = ^gT ^ \G\ = 7TT ^ 
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Let Poo be a place of K lying over oo. Then the inertia group of Pqo in the 
extension jK is F* fl G, and so the ramification index e(Poo|oo) of Pqo over oo is 
given by 

IF* I IF^-GI |F*-C1^(A)| 

i.e., oo is unramified in KjE^- 

Let P be a place of K lying over Q. Since the inertia group of Q in E'^ jE^ is 
(^2/Q)* by the theory of narrow ray class fields, the inertia group of P in E^ jK 
is {A2IQ)* n G = F* • {AjQ)*. Thus, the ramification index e(P|Q) of P over Q is 
given by 
(9) 

e(P|Q) 



l(^2/Q)*| 


_ l(^2/Q)* 




|F;n(Ai/Q)*| 




|F*-(A/Q)*| 






■|(VQ)*I 


(g-l)(f-l) £+1 



Since 00,(5 cire the only ramified places in E^ jEi-, and 00 is unramified in K/E2^ 
we conclude that the place Q is the only ramified place in K / E2 with ramification 
index (r + !)/(£+ 1). 

Now, all F^-rational places of Pi can be viewed as F^-rational places of E2 and 
furthermore they split completely in K. This is because for a rational place P of 
El with P 7^ 00, Q, from Proposition 3.2 and our construction, it follows that the 
Frobenius automorphism of P is contained in the subgroup Gal(P^/A'). There- 
fore, the Frobenius automorphism of P in the extension K/ E2 is the identity, and 
therefore P must split completely in K/E2. 

Since the decomposition group of Q in E^ IE2 is isomorphic to the cyclic group 
(^/ Q)*, the decomposition group of Q in K/ E2 is cyclic as well. The inertia group 
of Q, which is a subgroup of the decomposition group of Q, has order by (9). 
Thus, the Galois group Gal(-R'/P2) contains a cyclic subgroup of order This 
implies that there exists a subfield F of K/ E2 such that Gal(P/P2) is a cyclic group 
of order It is clear that all F^-rational places of Pi split completely in P as 

well. Hence 

iV(P/F,) ^ [P : P2]iV(Pi/F,) = ^±iiV(E,/F,) . 

Moreover, the place Q is the only ramified place in P/P2 (since it is the only ramified 
place in K/E2) and it is tamely ramified with the ramification index at most [F : P2]. 
Hence, we can apply the Hurwitz genus formula to the extension F/E2 and get 

2g{F) - 2 ^ {2g{E2) - 2)[P : P2] + r([P : P2] - 1). 

The desired result follows from the fact that g{E2) = g{Ei). □ 



The following theorem provides the family of function fields that we required to 
construct our folded algebraic geometric codes in Theorem 2.5. 
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Theorem 3.6. Let i be a prime power and let q = £^ . Assume that there is a 
family {E /¥i} of function fields such that g{E) — )• oo and N{E/¥i)/ g{E) — )■ A for 
a positive real A. Then for any odd integer r with r > log(2 + 7g{E))/ log(£), there 
exists a function field E/¥g such that E is a finite extension of ¥q ■ E of degree 
e:= (r + l)/(£+l) and 

(i) g{E) oo and g{E) ^ {g{E) - l)e + r(e - l)/2 + 1. 

(ii) N{E/¥,)^eN{E/¥e). 

(iii) E/(¥q ■ E) is a cyclic Galois extension of degree e. 

In particular, we have \\m'm.ig(^p^^^N{F /¥q) / g[F) ^A/{l + c) if r / g{E) 2c for 
a constant c ^ 0. 

Proof. The resuh foUows directly from Lemma 3.5 and the fact that there exists 
a place of degree r in _E as long as r > log(2 + 7 g{E)) / \og{tj (see [15, Corollary 
5.2.10]). This completes the proof. □ 



3.3. Chebotarev Density Theorem. Given Theorem 3.6, to show that the family 
of function fields with property (P3) exists, it remains to find a large set S of places 
of Pi? satisfying (P3)(ii). In order to accomplish this task, we need the explicit form 
of the Chebotarev Density Theorem. 

Let F/L be a Galois extension of degree e of function fields over F^. Assume that 
¥q is the full constant field of both F and L. Let t be a separating transcendence 
element over F^. Let d = [L : ¥q{t)]. 



For a place Q of F lying over P of L, let 
any a G Gal(F/L), the Frobenius of (j{Q) is a 



F/L 



F/L 
Q 



be the Frobenius of Q. Then for 
cr~^. Thus, the conjugacy class 



< a a ^ : a E Gal(F/L)| is determined by P. We denote this conjugacy by 



F/L 



Fix a conjugacy class C of Gal(F/L), let Mh{C) denote the number of places P 



of degree h in L that are unramified in both F/L and L/¥q{t) such that 
Then we have the following result [3, Proposition 6.4.8] and [12]. 

Theorem 3.7 (Chebotarev Density Theorem). One has 

2\C\ 



F/L 
P 



C. 



(10) 



A4(C) - ^-q^ 
eh 



e + gF)q^'^ + e{2gL + l)q'"^ + gp + de 



eh 



h/4 



where gp and gi denote the genera of F and L, respectively. 

Finally, we are able to show existence of a family of function fields with (P3). 

Theorem 3.8. There exists a family of function fields with (P3). More precisely 
speaking, we have the following result. 
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Let i be a square prime power and let {E/¥i} be the Garcia- Stichtenoth tower 
given in [4]. Let {F/¥q} be the family of function fields constructed in Theorem 3.6. 
Put L := ¥q ■ E , n := N{E/¥i) and denote by a a generator of Ga\{F/L). Let 
r = 2\n/{\/i — 1)] + 1 and h = 3r. Then there exists a set S of places of L such 
that 



(i) 15*1 ^ g^' and deg{R) = h for all places R in S . 

(ii) For every place R in S, there is a unique place P of F of degree eh lying 
over R and =a^^. 

(iii) lim inf N{F/¥g) / g{F) ^ (v^ - l)/2 = - l)/2. 

Proof. Let {E/¥i} be the well-known Garcia- Stichtenoth tower [4]. Then one has 
N{E/¥i)/g{E) ^ \/£ - 1 with g{E) oo and [E : F^(t)] ^ g{E) for a separating 
transcendence element over F^. Thus, d = [L : ¥q{t)] ^ g{E) = g{L). By our choice 
of parameters h,r, we find that 



en 



^{e + g,)q^" 
eh 



e{2gL + l)q'''^ + gF + de] ^q 



By Theorem 3.7, there exists a set S of places of L with 15*1 ^ g'' such that deg(i?) 



h and 



F/L 
R 



a ^ for every place R in S. Let P be a place of F lying over R. The 

Probenius cr~^ of P belongs to Gal(P/Z), where Z is the decomposition field of P 
in FjL. Since the order of cr~^ is e = [P : L], we must have Z = L and hence the 
relative degree /(P|P) is e. So P is the only place of P lying over R. 

Since rjgiE) 2, we have liminf A^(P/Fg)/^(P) ^ (v^ - l)/2 by Theorem 
3.6. □ 



4. Encoding and Decoding 

We have not considered encoding and decoding of the folded algebraic geometric 
codes constructed in Section 2. This section is devoted to the computational aspects 
of encoding and decoding of our folded codes. 

4.1. Encoding. Let us consider the folded algebraic geometric code given in the 
proof of Theorem 2.5, where the divisor D is ^'Ylip^\oo p^&p^ ^^"^ Riemann- 
Roch space is L{ID). To encode, we assume that le > 2g — 1 and there is an 
algorithm to find a basis {zi,Z2, . . . , z/^} of C{ID) with k = le — g + 1. 

Furthermore, we assume that, for every point P[^ and each function / with 
i^paiW) ^ O5 there is an efficient algorithm to evaluate / at P"\ i.e., find f{P"^). 

i 

For a function / and a rational place P with jyp{f) ^ 0, the algorithm of evaluating 
f at P consists of 

(i) Finding a local parameter t at P (recall that a function t is called a local 
parameter at P if z/p(t) = 1). 
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(ii) Finding the unique element a G ¥g such that up (^^7^) ^ (note that this 
unique element a is equal to /(-P)). 

4.2. Decoding. As we have seen, encoding is easy as long as we have an efficient 
algorithm to compute a basis of the Riemann-Roch space and evaluation at rational 
places. However, we need some further work for decoding. 

The idea of decoding is to solve the equation (6) through local expansions at a 
point. Let us briefly introduce local expansions ffist. The reader may refer to [13, 
pages 5-6] for the detailed result on local expansions. Let F/¥q be a function field 
and let P be a rational place. For a nonzero function f E F with i'p{f) ^ we 
have vp (|^) ^ 0. Put = (^) (P), i.e., a„ is the value of the function f /t^ at 
P. Note that the function f/f" — satisfies up — a^,) ^ 1, hence we know that 
jyp (^#) > 0. Put a,+i = (^#) (P). Then up{f - - a,+ir+i) ^ i; + 2. 

Assume that we have obtained a sequence {a^j^^, {m > v) of elements of such 

that iyp{f - Er=v(^rt') > k + 1 hi aWv ^ k ^m. Put a„+i = (^^^^m^) (P)- 

Then uplf — Xl!^^ ttrt^) ^ m + 2. In this way we continue our construction of 
the ttr- Then we obtain an infinite sequence {a^}^^ of elements of ¥q such that 
^pif ~ YlT=v C'rt^) ^ + 1 for all m ^ u. We summarize the above construction in 
the formal expansion 

00 

(11) / = 5^a,r, 

r=v 

which is called the local expansion of / at P. 

It is clear that local expansions of a function depend on choice of the local param- 
eters t. Note that if a power series Yl'i^v satisfies i^p(/ — Yl^v '^«^*) ^ + 1 for 
all m ^ V, then it is a local expansion of /. The above procedure shows that finding 
a local expansion at a rational place is very efficient as long as the computation of 
evaluations of functions at this place is easy. 

The following fact plays an important role in our decoding. 

Lemma 4.1. Let F/¥q be a function field and let a G Aut(P/Fq) be an automor- 
phism. Let P, P'^ ^ be two distinct rational places. Assume that t is a common 
local parameter of P and P^ , i.e., vp{t) = upait) = 1 such that t^ = t. Suppose 
that f & F has a local expansion Xli^o*^*^* P" f^'^ some G F^, then the local 
expansion of ^ at P is Y^'^o^i^^ ■ 

Proof. By the definition of local expansion, we have vpa (/ — afi) ^ m + 1 for 

allm ^ 0. This gives v^^p^y-. ((/ - EIio«*^')"") = - EIio«*^') ^ 

for all m ^ 0. The desired result follows. □ 

Now let F be the function field constructed in Corollary 3.8. Then it satisfies 
the Property (P3). Assume that U 7^ 00 is a rational place of E and t E E is & 
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local parameter at U. Then U can be viewed as an F^-rational point of L = ¥q ■ E. 
Moreover, U splits completely in F/L. We may assume that all rational places of 
F lying over U are P, P°", . . . , P""" , where a is a generator of Gal(P/L). It is clear 

e — 1 

that t is a common local parameter of P, P*^, . . . , P'^ . Furthermore, we have = t 
since t & E G L. 

To solve for the functions / that satisfy the algebraic equation (6), let us assume 
that / = Yli=i fi^i some fi E ¥q, where k = le — g + 1 is the dimension of C{ID). 
Solving for / in (6) is equivalent to finding Assume that the local expansion 

of Zi at P"^ is given by Yl^=Q^ijhi^ ■ Then by Lemma 4.1, ^ have the local 
expansion Xlh^o ^ijht^ at P. Thus, /'^ ^ has the local expansion Yl!i=i ShLo ^ijht^ at 
P. Furthermore assume that Ai have local expansions Xl^^o ^ ^ z ^ s. 

Substitute these local expansions in Equation (6), we obtain an equation 

(12) Co(/l,/2,...,/fc)+Ci(/i,/2,...,/fc)t+--- + Q(/l,/2,...,/fcK + --- = 0, 

where Cj(/i, /2, . . . , fk) is a linear combination of /i, /2, • • • , fk for all i ^ 0. Thus, 
each of the coefficients of the above power series (12) must be zero. This pro- 
duces infinitely many linear equations Cj(/i, /2, . . . , /fc) = for i ^ in variables 
/i, /2, . . . , fk- This system of infinitely many linear equations is equivalent to the 
system 

(13) Ci{fij2,---Jk) = for i = 0, 1, . . . ,/e 

due to the fact that Aq + Aif + ■ ■ ■ + Agf^ ^' G C{ID) and the following simple 
claim. 

Lemma 4.2. If x is an element in C{ID) and has a local expansion Xli^ze+i ^i^^ 
some Aj G Fg, then x is identical to if Xi = for all i ^ le. 

Proof. By the local expansion of x, we know that x belongs to C{ID — [le + 1)P). 
The desired result follows from the fact that deg{lD — [le + 1)P) = — 1 < 0. □ 

The equation system (13) has le+1 equations and contains k = le—g + 1 variables. 
Theorem 2.5 guarantees that this system has at most 0{N^^~^^'^) solutions. 

Given the discussion of encoding and decoding, we rewrite Theorem 2.5 as the 
main result of this paper. 

Theorem 4.3 (Main). For any small s > and a real < R < 1, one can 
construct a folded algebraic geometric code over alphabet size (l/e)'^^^^^ ■* with rate 
R and decoding radius r = 1 — R — e such that the length of the code tends to oo 
and is independent of e. Moreover, the code is deterministically list decodable with 
a list size 0{N^/'^). 

Given a polynomial amount of pre-processed information about the code, the al- 
gorithm essentially consists of solving two linear systems over ¥q, and thus runs in 
deterministic polynomial time. 
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Proof. In Theorem 2.5, choose s ^ 1/s and m ^ and q ^ l/s^, the error 

fraction r given in Theorem 2.5 is 1 — i? — 5. The alphabet size of the folded code 
is q"", which is and the list size is 0{N^^^-^>) = 0{N^/'^). □ 

4.3. Computing A Basis of Riemann-Roch Space. Both encoding and decod- 
ing described earlier depend on an algorithm to find a basis of the Riemann-Roch 
space C{ID). We divide this job into two steps. The first step is to find an explicit 
equation defining our function field F constructed in Section 3 through class field 
method. The second step is to find a basis of our Riemann-Roch space based on the 
equation form Step 1. 

In [11], a polynomial algorithm of finding a basis of a Riemann-Roch space is 
given based on an explicit equations of the associated function field. If F is of the 
form ¥q{x,y) with a defining equation 

(14) y'' + ai(x)/-^ + ■ ■ ■ + ah-iix)y + ah{x) = 

with ai{x) G Fq[a:], then [11] describes an algorithm with polynomial time in h, the 
divisor degree le and A, where A is the largest degree of ai(x),a2(x), . . . ,ah{x) in 
(14). Thus, if we can find an equation defining the field F with A being a polynomial 
in the code length A^, then [11] provides an polynomial algorithm in the code length 
to determine a basis oi C{ID). 

Thus, to get a polynomial time encoding and decoding for our folded algebraic 
code, it is sufficient to obtain polynomial time algorithms for 

(i) finding a defining equation (14) of F such that A is a polynomial in code 
length A^; 

(ii) computing evaluations of functions at rational places. 

Part (ii) is usually easier. The key part is to find a defining equation of the 
underlying function field. To see this, we start with the function field E defined 
by the Garcia-Stichtenoth tower. Then one has [E : F£(x)] ^ N{E/¥i). Moreover, 
E/¥i{x) is a separable extension, thus there exists (3 E E such that E = F^(x, /3). 
Consequently, we have L = Wq ■ E = Wq{x, /3). 

The paper [1] describes a method to find an element a of F such that F = L{a). 
Thus, F = Wq{x,a, P). Now the problem is how to find an element y E F such 
that F = ¥q{x,a, P) = ¥q{x,y) with the defining equation given in (14) and the 
maximum degree A is a polynomial in N. 

We summarize what we discussed above into an open problem. 

Open Problem. Find a polynomial time algorithm to construct an explicit equa- 
tion (14) of the function field F given in Theorem 3.8 and compute a basis of the 
Riemann-Roch space efficiently. 
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